1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
# False positives: the files *are* compiled and linked with hardening flags.
ulogd2: hardening-no-fortify-functions [usr/lib/*/ulogd/ulogd_inppkt_NFLOG.so]
ulogd2: hardening-no-fortify-functions [usr/lib/*/ulogd/ulogd_inppkt_UNIXSOCK.so]
ulogd2: hardening-no-fortify-functions [usr/lib/*/ulogd/ulogd_output_IPFIX.so]
# More false positives: these *are* shared libraries, but they are plug-ins and
# lack dependencies.
ulogd2: library-not-linked-against-libc [usr/lib/*/ulogd/ulogd_filter_IFINDEX.so]
ulogd2: shared-library-lacks-prerequisites [usr/lib/*/ulogd/ulogd_filter_IP2HBIN.so]
ulogd2: shared-library-lacks-prerequisites [usr/lib/*/ulogd/ulogd_filter_MARK.so]
ulogd2: shared-library-lacks-prerequisites [usr/lib/*/ulogd/ulogd_raw2packet_BASE.so]
# Config file may contain plaintext passwords, e.g. for MySQL.
ulogd2: non-standard-file-perm 0600 != 0644 [etc/ulogd.conf]
|
